v1.2.8

roboflow/inferencev1.2.8May 13, 2026by PawelPeczek-Roboflow

AI Summary

This release deprecates the Gaze detection feature (returns HTTP 410 Gone) and introduces new workflow blocks for Image Stack and OpenAI-compatible LLM endpoints. It also adds opt-in HTTPS support for the inference server and includes security hardening updates.

Key Highlights

  • **Deprecated** Gaze detection (L2CS-Net / MediaPipe) - raises HTTP 410 Gone.
  • New Image Stack workflow block for temporal pipelines.
  • New OpenAI-compatible LLM block for custom endpoints.
  • Opt-in HTTPS support for the inference server.
  • Security hardening: OpenTelemetry stack bumped to clear CVE.

Breaking Changes

  • Gaze detection (L2CS-Net / MediaPipe) is deprecated and will return HTTP 410 Gone.

New Features

  • Image Stack workflow block.
  • OpenAI-compatible LLM block.
  • Opt-in HTTPS support for inference server.
  • Security updates (OpenTelemetry bump, legacy SAM3 block rejection).

Full Release Notes

# ⚠️ Deprecated

## 🚫 Gaze (L2CS-Net / MediaPipe) detection

Gaze detection — the `roboflow_core/gaze@v1` workflow block, the `POST /gaze/gaze_detection` HTTP route, and the `InferenceHTTPClient.detect_gazes()` / `detect_gazes_async()` SDK helpers — has been **deprecated** in this release. Calling any of these now raises a new `FeatureDeprecatedError` that surfaces as **HTTP 410 Gone** with `error_type: "FeatureDeprecatedError"`.

The Gaze pipeline was built on top of **MediaPipe**, which has dropped support for parts of the hardware matrix Roboflow ships against (notably some Linux/aarch64 and Jetson configurations no longer have compatible wheels), and a transitive `protobuf` [CVE2026-0994](https://nvd.nist.gov/vuln/detail/CVE-2026-0994) meant we could no longer carry the dependency alongside the rest of the inference stack.

```python
# Old (still loads, returns 410 at execute time):
from inference_sdk import InferenceHTTPClient
client = InferenceHTTPClient(api_url="...", api_key="...")
client.detect_gazes(inference_input="image.jpg")
# → raises inference_sdk.http.errors.FeatureDeprecatedError
```

> [!IMPORTANT]
> **The last release supporting Gaze is `v1.2.7`.** If you currently rely on Gaze detection locally — pin to `inference==1.2.7` (or the matching Docker image tag) as a short-term bridge while you plan ahead, keeping in mind that vulnerability exists in the build.

> [!NOTE]
> The `POST /gaze/gaze_detection` route remains registered as a **410-Gone stub** through end of Q2 2026 so existing client integrations get a structured error rather than a 404. Set `CORE_MODEL_GAZE_ENABLED=False` to disable it immediately.

If Gaze is important to your workflow and you'd like to discuss bringing it back paired with a different face detector, reach out at **support@roboflow.com** — we're happy to chat.

PR: https://github.com/roboflow/inference/pull/2334

---

# 💪 Added

## 🖼️ Image Stack workflow block

A new `Image Stack` workflow block lets you accumulate frames across executions — useful for building temporal pipelines, sliding-window inference, or any flow that needs to reason over a buffer of recent images rather than a single frame.

PR: https://github.com/roboflow/inference/pull/2307

## 🤖 OpenAI-compatible LLM block for custom endpoints

A new workflow block that lets you point at **any OpenAI-compatible HTTP endpoint** — your own self-hosted vLLM/Ollama/LM Studio deployment, a private gateway, or a third-party provider that mirrors the OpenAI API. Combined with the `extra_body` follow-up, you can also pass provider-specific extensions (reasoning effort, sampling tweaks, custom routing flags) through to the upstream call.

PRs: https://github.com/roboflow/inference/pull/2309, https://github.com/roboflow/inference/pull/2313

## 🔐 Opt-in HTTPS for the inference server

The HTTP server now supports terminating TLS directly via SSL environment variables — no reverse proxy required for simple self-hosted setups. Off by default; opt in by setting the relevant SSL env vars.

PR: https://github.com/roboflow/inference/pull/2308

---

# 🔒 Security & Hardening

* 🚫 **Block legacy fine-tuned SAM3 loads** — tighten the SAM3 model loading boundary so legacy fine-tuned artefacts that no longer match the supported package shape are rejected up front. [#2278](https://github.com/roboflow/inference/pull/2278)
* 📦 **OpenTelemetry stack bumped** to `1.41.x` / `0.62b1` to clear a transitive `protobuf` CVE and unlock alignment with the newer `inference-models` release. [#2335](https://github.com/roboflow/inference/pull/2335)
* 🛡️ **Additional security fixes** across the stack. [#2336](https://github.com/roboflow/inference/pull/2336)

---

# 🚧 Maintenance

* Align rfdetr preproc/postproc to rf-detr-internal by @leeclemnet in https://github.com/roboflow/inference/pull/2298
* Fix workflow block display names for acronym segments by @SolomonLake in https://github.com/roboflow/inference/pull/2320
* Fix owlv2 / rf-instant forward for best/default confidence modes by @leeclemnet in https://github.com/roboflow/inference/pull/2324
* Drop default/best confidence parametrization from OWLv2HF test by @leeclemnet in https://github.com/roboflow/inference/pull/2337
* Fix import for Gaze model by @PawelPeczek-Roboflow in https://github.com/roboflow/inference/pull/2338
* Constraint `transformers` on Jetson with JP5 by @PawelPeczek-Roboflow in https://github.com/roboflow/inference/pull/2339
* Update serverless docs to v2 and prune deprecated pages by @Erol444 in https://github.com/roboflow/inference/pull/2311
* chore(docs): add GEO/SEO schema, robots.txt, git-revision-date plugin by @Borda in https://github.com/roboflow/inference/pull/2312

---

# 👋 New Contributors

* @Borda made their first contribution in https://github.com/roboflow/inference/pull/2312

**Full Changelog**: https://github.com/roboflow/inference/compare/v1.2.7...v1.2.8